Not yet
0x01 Hazard level
high-risk
0x02 vulnerability overview
The sonic wall ssl-vpn product uses a very old Linux kernel and HTTP CGI executable program, which cannot correctly parse the HTTP header when processing HTTP requests. This vulnerability leads to command injection, which allows remote attackers to gain control privileges.
0x03 version affected
Sonic SMA < 8.0.0.4
0x04 repair suggestions
Users are advised to update the Security version in time:
https://www.sonicwall.com/zh-cn/
0x05 verify exp
https://github.com/darrenmartyn/Visual Door